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gao THE QUESTION 


(u/fouo) How do we describe the 
collection capabilities and posture of 
our SIGINT infrastructure? 


THE OLD Way 


rt 


Typical SIGINT Data Calls/Questions‏ (סטספווט) 

1. How many sites do we have in the region? How many records are they 
producing? 

2. What type of coverage do we have on country X? 


3. What type of collection and volume do we get out of site A? How do these 
types/volumes compare against site B? Against site C? 


(unFouo)Ways to Get Answers 
1. Map out the physical location of SIGINT assets 


2. Send out a data call based on best guesses for who can answer the 
question 


3. Review static reports/spreadsheets from previous data calls 
4. Aska 30-year SIGINTer 


THE NEW Way BOUNDLESSINFORMANT 


(U//FOUO) Use Big Data technology to query SIGINT collection in the cloud to 
produce near real-time business intelligence describing the agency's available 


SIGINT infrastructure and coverage. 


(unsovo) Key Questions 


1 How many records are collected for an organizational unit (e.g. FORNSAT) or 
country? 


2. Are there any visible trends? 
3. What assets collect against a specific country? What type of collection? 
4. What is the field of view for a specific site? What type of collection? 


(urrouo) Potential Users 
1. Strategic decision makers (leadership team) 
2. Tactical users (mission and collection managers) 


1) ((///£0(19) Current focus is on SIGINT/COMINT 


2)  (UNFOVO) Review every valid DNI and DNR metadata record passing 
through the NSA SIGINT infrastructure 


a)  (UNFOUO) For the Map View, only display aggregated counts of records with a 


normalized number or an administrative region populated. 


b)  (UNFOUO) For the Org View, display aggregated counts of every valid record. 


3)  (UNFOVO) Raw data, analytics, and back-end database are all conducted in 
the cloud (HDFS, MapReduce, Cloudbase). 


(U//FOUO) BOUNDLESSINFORMANT is hosted entirely on corporate services 
and leverages FOSS technology (i.e. available to all NSA developers). 


Q| 


W/NOFORN 


~~ 
- - 
un 
.- 


NE 
a . 


ණු سہ‎ ෴෴ 


2) 


3) 


4) 


5) 


6) 


(urrrouo) Add technology type (e.g. JUGGERNAUT, LOPER) to provide additional 
granularity in the numbers 


(urrouo) Integrate Site Similarity capability (i.e. Gephi Charts) 


(u/Fouo) Anomaly detection and alerts 


(ursouo) Other “INT” data (e.g. ELINT, FISINT) 


(u/Fouo) Add survey data and display delta between collected metadata 
and survey data 


(urFouo) Add in selected (vs. unselected) data indicators 


